Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/06AfR8ZbdQ5_MZMYhDQjdfTo_kA.roa
File: 06AfR8ZbdQ5_MZMYhDQjdfTo_kA.roa (raw, json)
Hash identifier: EEGnzX0afqpfc3Kn5NnezY7IPw+uVu1JdUrzEk+iDpk=
Subject key identifier: D3:A0:1F:47:C6:5B:75:0E:7F:31:93:18:84:34:23:75:F4:E8:FE:40
Certificate issuer: /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial: 019424B3C14F723D86997E16A35FD6C05B0F
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/06AfR8ZbdQ5_MZMYhDQjdfTo_kA.roa
Signing time: Thu 02 Jan 2025 01:49:07 +0000
ROA not before: Thu 02 Jan 2025 01:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20539
IP address blocks: 94.199.160.0/21 maxlen: 24
2a02:680:8000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c1:4f:72:3d:86:99:7e:16:a3:5f:d6:c0:5b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Validity
Not Before: Jan 2 01:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3a01f47c65b750e7f31931884342375f4e8fe40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f2:74:a8:5b:b3:b2:3f:05:2c:80:a1:82:13:
51:68:67:b0:6a:04:07:91:01:40:dd:a7:6a:9e:d2:
1f:4d:fe:62:5e:94:24:49:d7:77:99:b4:4c:ce:4f:
35:bd:7b:95:a1:d7:c3:8a:e2:a7:19:47:e5:a4:50:
11:b6:af:dd:63:3b:fc:fe:a4:4a:d7:0e:e0:83:11:
f4:4b:90:e6:17:e5:01:50:d8:b9:80:13:d8:47:7d:
e6:df:f6:c1:92:16:32:4c:93:b0:10:a5:f8:96:db:
3e:f1:8c:3b:e4:1c:2c:95:68:67:8d:e3:4a:cb:31:
e3:df:ea:47:c1:c0:c4:c6:07:b6:ad:54:07:49:08:
c1:f6:72:2d:f8:30:74:ba:90:85:30:37:18:ba:c6:
64:66:75:9d:e7:5e:de:51:8c:fd:0a:79:ac:c3:1f:
ea:e3:cc:48:0e:ae:8b:4d:94:6f:87:34:bd:df:ed:
ed:ee:a0:1a:4a:49:b0:37:87:73:36:90:2d:30:ca:
e9:c9:f1:b9:c7:bc:9a:73:61:75:a0:77:90:4d:76:
77:cf:15:d9:47:67:2a:94:d9:f8:5c:0f:ec:58:56:
b4:c6:24:b5:5a:e6:fb:82:ef:ed:f5:0e:08:65:2c:
03:89:7c:6b:f1:28:b5:a6:b0:5f:7d:11:28:df:ae:
a8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A0:1F:47:C6:5B:75:0E:7F:31:93:18:84:34:23:75:F4:E8:FE:40
X509v3 Authority Key Identifier:
keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/06AfR8ZbdQ5_MZMYhDQjdfTo_kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.160.0/21
IPv6:
2a02:680:8000::/36
Signature Algorithm: sha256WithRSAEncryption
62:27:c2:3e:72:3f:ad:9f:73:d0:89:c9:f7:cb:0a:f4:73:ea:
2e:4a:1a:63:d6:89:bb:d4:88:05:71:2e:2b:e7:15:77:44:51:
0d:b5:17:b4:88:45:5d:6b:58:56:ab:bb:94:a7:38:ed:2d:77:
8e:4e:d0:27:8d:f0:4c:eb:6b:af:45:19:5e:d7:41:19:6d:b7:
03:9f:6d:f4:a4:2a:5f:3f:82:f2:12:4d:ba:5a:31:df:8b:e2:
8c:b9:f3:e5:1a:e8:8c:f3:91:ab:bf:1f:b0:cf:2b:b3:27:c8:
c4:af:f3:7d:5d:0f:95:2e:2b:be:0b:76:e6:37:76:6b:a8:5f:
8b:9e:23:a2:3a:d5:84:1f:47:51:f2:98:12:23:6f:3b:60:2b:
0a:46:21:81:ea:c2:e5:13:67:02:d2:76:d5:e2:53:c4:d9:a0:
e0:3a:95:2f:0e:fe:e0:f4:b7:59:e8:a0:da:fa:f7:f6:95:aa:
98:7e:a4:5d:46:54:6d:01:4c:4c:68:c2:c9:1e:07:f5:11:32:
06:bc:dd:3a:82:00:dd:ce:c4:67:f5:29:5e:aa:fe:48:29:84:
68:cb:48:43:04:0c:29:20:f0:28:bb:7f:13:4b:dc:19:43:8f:
a3:99:5a:28:a7:ba:71:ce:d6:a1:d9:b1:1f:dc:d8:bc:57:7a:
b6:1d:b1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:11 2025 by rpki-client